CVE-2020-8327

High

Description

A privilege escalation vulnerability was reported in LenovoBatteryGaugePackage for Lenovo System Interface Foundation bundled in Lenovo Vantage prior to version 10.2003.10.0 that could allow an authenticated user to execute code with elevated privileges.

SeverityHigh
CVSS7.3
Exploit probability—
ProductLenovo Vantage
PublishedApr 14, 2020
First seenApr 14, 2020
Weakness typeCWE-428CWE-428

How to fix

Update
  • lenovo vantage10.2003.10.0 or later

Affected products

ProductAffected versionsFixed in
lenovo vantagev < 10.2003.10.010.2003.10.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.